CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
8820 | CVE-2004-0392 | Candidate | racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields. | Assigned (20040413) | None (candidate not yet proposed) | View | |
8821 | CVE-2004-0393 | Candidate | Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function. | Assigned (20040413) | None (candidate not yet proposed) | View | |
8822 | CVE-2004-0394 | Candidate | A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic. | Assigned (20040413) | None (candidate not yet proposed) | View | |
8823 | CVE-2004-0395 | Candidate | The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call. | Assigned (20040413) | None (candidate not yet proposed) | View | |
8824 | CVE-2004-0396 | Candidate | Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines. | Assigned (20040413) | None (candidate not yet proposed) | View |
Page 851 of 20943, showing 5 records out of 104715 total, starting on record 4251, ending on 4255